ChatGPTNextWeb / NextChat
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-82639 | NextChat 2.15.8 through 2.16.1 OpenAI API Key Disclosure | HIGH | 8.7 | Aug 30, 2026 |
| CVE-2026-7644 | ChatGPTNextWeb NextChat actions.ts addMcpServer improper authorization | MEDIUM | 6.9 | May 2, 2026 |
| CVE-2026-7643 | ChatGPTNextWeb NextChat API Endpoint Next.js cross-domain policy | MEDIUM | 5.3 | May 2, 2026 |
| CVE-2026-7178 | ChatGPTNextWeb NextChat Artifacts Endpoint route.ts storeUrl server-side request forgery | MEDIUM | 6.9 | Apr 27, 2026 |
| CVE-2026-7177 | ChatGPTNextWeb NextChat route.ts proxyHandler server-side request forgery | MEDIUM | 6.9 | Apr 27, 2026 |
| CVE-2024-38514 | NextChat Server-Side Request Forgery (SSRF) | HIGH | 7.4 | Jun 28, 2024 |
| CVE-2023-49785 | NextChat vulnerable to Server-Side Request Forgery and Cross-site Scripting | CRITICAL | 9.3 | Mar 11, 2024 |
Showing 1 to 6 of 6 CVEs